
Attorney Docket No.: CIS03-66(8488) 

^ IN THE UNITED STATES PATENT AND TRADEMARK OFFICE 

I 

pplicant(s): Nicholas LEAVY and Michael L. HALL, Jr. 
Serial No.: 10/820591 
For: USE OF PER-FLOW MONOTONICALLY DECREASING TTLs TO 

PREVENT IDS CIRCUMVENTION 
Filing Date: April 8, 2004 
Examiner: Unassigned 
Art Unit: Unassigned 



Certificate of Mailing Under 37 C.F.R. §1.8 



I hereby certify that this correspondence is being deposited with the 
United States Postal Service with sufficient postage as first class mail in an 
envelope addressed to: MAIL STOP AMENDMENT, Commissioner for Patents, 
PO Box 1450, Alexandria, VA 22313-1450 on: 



Date: August 12. 2004 By: Gail L Hardy 

(Typed or printed name of person mailing 
Document, whose signature appears 
below) 



Signature: 




MAIL STOP AMENDMENT 

Commissioner for Patents 
PO Box 1450 

Alexandria, VA 22313-1450 



INFORMATION DISCLOSURE STATEMENT 



This Information Disclosure Statement is submitted: 

[ ] under 37 CFR 1 .129(a), or (If IDS filed as first/second submission 
after Final Rejection); 

[X] under 37 CFR 1 .97(b), or (If IDS Filed within three months of filing 
national application; or date of entry of the national stage in international 
application; or before mailing date of first office action on the merits; 
whichever occurs last); 
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[ ] under 37 CFR 1 .97(c) together with either: 

[ ] a Statement under 37 CFR 1.97(e), as checked below, or 

[ ] a $180.00 fee under 37 CFR 1.17(p), or (If filed after the 37 CFR 
1 .97(b) time period, but before final action or notice of allowance, 
whichever occurs first) 

[ ] under 37 CFR 1 .97(d) together with: 

[ ] a Statement under 37 CFR 1 .97(e), as checked below, and 

[ ] a Petition under 37 CFR 1 .97(d)(2), and 

[ ] a $130.00 petition fee set forth in 37 CFR 1 .17(i). (If IDS filed after 
final action or notice of allowance, whichever occurs first, but before 
payment of the issue fee) 

[ ] Applicant requests that the attached IDS and cited reference(s) 
be placed in the application filewrapper. (If IDS filed after payment of 
issue fee) 

Statement Under 37 CFR 1.97(e) 

[ ] Each item of information contained in this Information Disclosure 

Statement was cited in a communication from a foreign patent office in a 
counterpart foreign application not more than three months prior to the 
filing of this Information Disclosure Statement; or 

[ ] No item of information contained in this Information Disclosure Statement 
was cited in a communication from a foreign patent office in a counterpart 
foreign application, and, to the knowledge of the undersigned, after 
making reasonable inquiry, no item of information contained in the 
information disclosure statement was known to any individual designated 
in 37 CFR 1 .56(c) more than three months prior to the filing of this 
Information Disclosure Statement. 

Enclosed herewith is Form PTO-1449 : 

[X] Copy of the cited references are enclosed except for those which 
qualify under 37 CFR 1 .98(a)(2)(i). 

[ ] Copy of cited references are enclosed except those entered in a 

prior application, having U.S. Serial No. , and references that 

are not required to be submitted under 37 CFR 1.98. 

[ ] The listed references were cited in the enclosed International 
Search Report in a counterpart foreign application. 
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[ ] Pursuant to the Official Gazette Notice of August 5, 2003 
the requirement under 37 CFR 1.98(a)(2)(i) for submitting a copy of each 
cited U.S. patent and each U.S. patent application publication is waived 
for all U.S. national patent applications filed after June 30, 2003. 

Concise Explanation Requirement (required for non-English references) : 

[ ] The "concise explanation" requirement for reference(s) 
under 37 CFR 1 .98(a)(3) is satisfied by: 

[ ] the explanation provided on the attached sheet. 

[ j the explanation provided in the Specification. 

[ ] submission of the enclosed International Search Report. 

[ ] the enclosed English language abstract. 

It is requested that the information disclosed herein be made of record in this 
application. 

Method of payment : 

[X] No fee is required for this Information Disclosure Statement. 

[ ] Enclosed is a check for $ 180.00 . which covers the Information Disclosure 
Fee. 

[ ] A copy of this Statement is enclosed. 

Applicant hereby petitions for any extension of time which is required to 
maintain the pendency of this case. If there is a fee occasioned by this 
response, including an extension fee, that is not covered by an enclosed check, 
please charge any deficiency to Deposit Account No. 50-0901 . 



Respectfully submitted, 




Paul E. LewkewiCzTEsq. 
U.S.P.T.O. Registration No.: 44,870 
Attorney for Applicant 
CHAPIN & HUANG, LLC. 
Westborough Office Park 
1700 West Park Drive 
Westborough, Massachusetts 01581 
Telephone: (508) 366-9600 
Facsimile: (508) 616-9805 
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OTHER DOCUMENTS (Including Author, Title, Date, Pertinent Pages, Etc.) 




AA 


Thomas H. Ptacek and Timothy N. Newsham: Insertion. Evasion, and Denial of Service: Eludine Network Intrusion Detection: Januarv. 1998: 
available at http://www.acri.ore/veni/Ptacek-Newsham-Evasion-98.ps: last visited March 19. 2003: 55 pages. 




AB 


Vern Paxson: Bro: A Svstem for Detecting Network Intruders in Real-Time: Computer Networks. December 1999; 31 (23-24) Pages 2435-2463; 
also available at http://www.icir.ore/verr^ro-info.html. 




AC 


Mark Handley, Vern Paxson and 
Semantics: Proceedings of USE> 


Christian Kreibich; Network Intrusion Detection: Evasion. Traffic Normalization, and End-to-End Protoco 


x.html: 


JIX Security Symposii 
ages. 


im 2001. available at Htto://www. icir.org/vem/DaDers/-norm-usenix-sec-01.html/inde 


last visited March 19, 2003; 17 p 
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